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Abstract. Classical and quantum information are very different. 
Together they can perform feats that neither could achieve alone, such 
as quantum computing, quantum cryptography and quantum telepor- 
tation. Some of the applications range from helping to preventing spies 
from reading private communications. Among the tools that will facili- 
tate their implementation, we note quantum purification and quantum 
error correction. Although some of these ideas are still beyond the grasp 
of current technology, quantum cryptography has been implemented and 
the prospects are encouraging for small-scale prototypes of quantum com- 
putation devices before the end of the millennium. 



1 Introduction 

Classical and quantum information are very different. Classical information can 
be read, copied and transcribed into any medium; it can be transmitted and 
broadcast. Quantum information cannot be read or copied without disturbance, 
but it can exist in superposition of classical states. Together, the two kinds of 
information can perform feats that neither could achieve alone, such as quantum 
computing, quantum cryptography and quantum teleportation. These concepts 
could result in a revolution in computer science that may dwarf that created 
decades ago by the transistor. 

In principle, computers could be built to profit from quantum phenomena 
that have no classical analogue, sometimes providing exponential speed-up com- 
pared to classical computers. The most famous example of an algorithm for the 
quantum computer, due to Shor, allows for the polynomial-time factorization of 
large integers, a task believed to be intractable for classical computers. Because 
of the pivotal nature of this problem in modern cryptography, a full-scale work- 
ing quantum computer could be used by spies to allow them nearly unlimited 
access to your electronic transactions. On the other hand, quantum information 
is also at the core of other phenomena that would be impossible to achieve in a 
purely classical world, such as the unconditionally secure distribution of secret 
cryptographic key material. Therefore quantum techniques may cause the col- 
lapse of much of classical cryptography, yet they may also offer the cure to make 
unconditionally secure communication possible. 
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2 Review of Quantum Techniques 

For a comprehensive review of quantum techniques in computer science, I suggest 
you read my earlier essay "A Quantum Jump in Computer Science" fll2| . 
Although this section provides a very superficial one-page introduction to these 
topics, my purpose in these Proceedings is to report on new ideas and develop- 
ments that were not yet available at the time "A Quantum Jump" went to press. 
These developments range from new theoretical ideas to actual implementation 
proposals for quantum computation. To emphasize how active and exciting the 
field has become, I deliberately restricted my coverage to papers that have ap- 
peared in 1995 or later, or yet-unpublished manuscripts that were written in the 
same period. Please consult "A Quantum Jump" for proper credit and references 
to the early ideas reviewed in this section. 

In classical information theory, a bit can take either value or 1. According 
to quantum mechanics, a quantum bit, or qubit, can be in linear superposition 
of the two classical states, with complex coefficients. This is best visualized as a 
point on the surface of a unit sphere whose North and South poles correspond 
to the classical values. This is entirely different from taking a value between 
and 1 as in classical analogue computing. In general, qubits cannot be measured 
reliably: not more than one classical bit of information can be extracted from 
any given qubit and the more information you obtain about it, the more you 
disturb it irreversibly. 

The impossibility to measure quantum information reliably is at the core of 
quantum cryptography. When information is encoded with non-orthogonal quan- 
tum states, any attempt from an eavesdropper to access it necessarily entails a 
probability of spoiling it irreversibly, which can be detected by the legitimate 
users. This phenomenon can be exploited to implement a key distribution system 
that is secure even against an eavesdropper with unlimited computing power. 
Several prototypes have been built, including one that is fully operational under 
laboratory conditions over 30 kilometres of ordinary optical fibre. In another ex- 
periment, quantum transmission was successful over a distance of 23 kilometers 
under Lake Geneva |^9| . Quantum techniques may also assist in the achievement 
of subtler cryptographic goals, such as protecting private information while it is 
being used to reach public decisions. 

Independent qubits are sufficient to produce nontrivial cryptographic phe- 
nomena, but they are not very interesting for computational purposes. For this, 
we must consider quantum registers composed of n qubits. Such registers can be 
in an arbitrary superposition of all 2" classical states. In principle, a quantum 
computer can be programmed so that exponentially many computation paths 
are taken simultaneously in a single piece of hardware, a phenomenon known 
as quantum parallelism. What makes this so powerful — and mysterious — is the 
exploitation of constructive and destructive interference, which allows for the 
reinforcement of the probability of obtaining desired results while at the same 
time the probability of spurious results is reduced or even annihilated. In the 
words of Feynman, "it appears as if the probabilities would have to go negative" . 
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3 Good Starting Points 



In addition to my "Quantum Jump" article | |l2| , several excellent introduc- 
tions to quantum computing have been written recently. Let us mention [§7| 
in Scientific American, [ p3[ in Discover, in Nature, Q] in Physics Today, 
PH in Science, and ]To[ ] . In addition, Shor has written a very nice account of 
his quantum factorization algorithm [ |32| , which introduces the basic concepts of 
quantum computing. 



4 The Power of Quantum Computing 

Quantum computing was considered at best as a curiosity by most researchers 
until Shor discovered in 1994 that it could be used to extract discrete logarithms 
and factorize large numbers very efficiently. This attracted considerable atten- 
tion, not only because of its tremendous cryptographic significance, but also 
because it gave the first indication that quantum computers could be genuinely 
faster than classical probabilistic computers for solving natural problems of a 
mathematical nature. The obvious question that followed was: "What else are 
quantum computers good at?" 

Unfortunately, Shor's discovery was not followed by a flurry of other natural 
problems that the quantum computer could solve much more efficiently than 
using the best algorithm available for a classical computer. Nevertheless, a few 
such results have emerged already and perhaps still others are waiting in the 



wings. Using a method similar to Shor's, Boneh and Lipton |11 showed that 
any cryptosystem based on what they call a "hidden linear form" can be broken 
in polynomial time on a quantum computer. In particular, a quantum computer 
can solve the discrete logarithm problem efficiently over any group including 
Galois fields and elliptic curves. 

Another extension to Shor's result is due to Kitaev [Q, who discovered 
how to solve the Abelian stabilizer problem efficiently on a quantum computer. 
This method provides an efficient quantum Fourier transform algorithm for an 
arbitrary Abelian group. 



5 Experiments in Quantum Computing 

As I explained in "A Quantum Jump" , the discovery that universal quantum 
circuits could be built around two-qubit gates was very significant because the 
technological difficulties would be even more daunting if it had been necessary to 
make qubits interact three at a time. Unfortunately I gave only reference to the 
work of DiVincenzo pOfl in my earlier essay. The same result was found indepen- 
dently by Barenco and by Sleator and Weinfurter |$3|. It was subsequently 
discovered by Chau and Wilczek Jl4j that six two-qubit gates are sufficient to 
implement the quantum Fredkin gate, which is a natural three-qubit universal 
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gate; this result was improved by Smolin and DiVincenzo ||34f| to needing only 
five two-qubit gates for the same purpose. In fact, almost any two-qubit gate 
is universal, as Deutsch, Barenco and Ekert [[t9) and Lloyd discovered inde- 
pendently. The most significant result along these lines is probably the discovery 
that the quantum exclusive-or gate, which maps (x, y) to (x, x © y), is universal 
for quantum computation in the sense that all unitary operations on arbitrar- 
ily many qubits can be expressed as compositions of these gates together with 
appropriate one-qubit gates . 

This begs the question: how hard is it to implement the quantum exclusive-or 
gate? Several approaches have been proposed for this purpose. Cirac and Zoller 
proposed to use cold trapped ions |l8| . An actual implementation of the quantum 
exclusive-or gate using beryllium ions in an atom trap has been tested with 
encouraging results by Monroe, Meekhof, King, Itano and Wineland Q at NIST 
in Boulder, Colorado. Another team led by Hughes at the Los Alamos National 
Laboratory has received funding for experimenting with cold trapped calcium 
ions. They hope to be able to implement a small-scale version of Shor's quantum 
factorization algorithm within a few year. Their initial goal is to factorize the 
number 4 before the end of the millennium, but they are confident that this will 
only be a beginning. 

Another approach to the implementation of basic quantum gates, using cav- 
ity quantum electrodynamics, has been proposed by Sleator and Weinfurter [^3| . 
Initial experiments on similar ideas, using atomic interferometry and microwave 
cavities, have been performed at the Bcole Normale Superieure in Paris by 
Domokos, Raimond, Brune and Haroche [p2[ . Experiments are also under way at 
the California Institute of Technology, where Turchette, Hood, Lange, Mabuchi 
and Kimble are investigating photon qubits interacting in an optical microcav- 
ity |6). See also @. 

An explicit construction of quantum networks for performing arithmetic oper- 
ations from basic quantum gates is given by Vedral, Barenco and Ekert p^] . This 
may prove important for an actual implementation of Shor's algorithm, which re- 
quires basic arithmetic from addition to modular exponentiation. In particular, 
this paper shows that the amount of auxiliary storage required to implement 
Shor's algorithm grows linearly with the size of the number to be factorized. 

Yet another proposal for the construction of a "simple quantum computer" 
comes from Chuang and Yamamoto |17| . 



6 The Problem of Decoherence 

Despite the reasons to be optimistic that the work described in the preceding 
section might generate, it may be that quantum computing will never become 
practical because of the technological difficulties in preventing unwanted interac- 
tions with the environment: such interactions cause decoherence, which in effect 
ruins the quantum computation. An early — and rather discouraging — study of 
the effect of decoherence on quantum computers was carried out by Unruh [p7| . 
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Other difficulties with the implementation of quantum computers have also been 
pointed out repeatedly by Landauer [f25| . 

The effect of decoherence on Shor's algorithm has been studied explicitly by 
Chuang, Laffamme, Shor and Zurek Q and by Plenio and Knight Q . 



7 Quantum Error Correction 

Error correction is used routinely when dealing with classical information. 
However, it is not obvious that error-correction schemes can exist for quantum 
information because it cannot be measured without disturbance. In particular, 
a simple repeat code is out of the question since quantum information cannot 
be cloned. Nevertheless, quantum information needs to be protected from errors 
even more than classical information in view of its susceptibility to decoher- 
ence. An early scheme for quantum error correction, proposed by Deutsch, was 
investigated by Berthiaume |)| and Jozsa. 

Assuming that the decoherence process affects the quantum computer's 
qubits independently, Shor has found a technique that allows the storage of 
an arbitrary state of n qubits using 9n qubits in a decoherence-resistant way: 
even if one of the qubits decoheres, the original state can be reconstructed per- 
fectly pl[ . Subsequently, Shor improved on his original idea in collaboration 
with Calderbank, making it possible to recover the original quantum state even 



if several qubits decohere 1 13 . Other quantum error-correction techniques have 
been proposed by Chuang and Laflamme and by Steanc [p5| . 

Another approach to quantum error correction is based on the ideas of 
entanglement concentration j^] and entanglement purification The latter is 
a technique that allows near perfect entanglement to be distilled from imperfect 
entanglement that may have been caused by partial decoherence — or by eaves- 
dropping for quantum cryptographic applications. This is accomplished by local 
operations and the exchange of classical messages. Because perfect entanglement 
can be used for the purpose of teleporting quantum information, entanglement 
purification can be used to transmit quantum information with arbitrary fidelity 
over a noisy quantum channel supplemented by a good classical channel. More 
advanced ideas, such as "teleportation from the present to the future, rather than 
from here to there" can be used to design a quantum error-correction scheme 
from quantum purification and quantum teleportation H. 



8 The Art of Quantum Programming 

By now, I am sure you are itching to write your first program for the quantum 
computer. In that case, you will be happy to learn that Baker is in the process 
of developing Q-Gol, a high-level language for the quantum computer. You can 
find more information on the World Wide Web (WWW) at URL 

http : //www. rp . csiro . au/~gbaker/q-gol/ 
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9 Quantum Information on the Internet 



Many WWW sites have blossomed with information on quantum compu- 
tation, quantum cryptography and quantum information theory in general. 
The following URLs are excellent starting points for a fascinating journey into 
the quantum world. Nearly all the papers cited as "manuscript" or "in press" 
in the references at the end of this essay can be downloaded from the quantum 
physics archive at Los Alamos National Laboratory. Have fun! 

http : / / xxx . lanl . gov/ archive/quant -ph 

Quantum Physics Archive at Los Alamos National Laboratory 

http : / / eve .physics . ox . ac .uk/QChome .html 

Quantum Computation and Cryptography Home Page at Oxford 

http : / / aerodec . ami . edu . au/~qc/ index . html 

Quantum Computing Home Page 
at Australian National University 

http : / /f eynman . Stanford . edu/qcomp/ 

Quantum Computation Archive at Stanford 

http : / / vesta . physics . ucla . edu/~smolin/ 

John Smolin's Quantum Information Page 

http : //www. cwi . nl/~berthiau 

Andre Berthiaume's Home Page 

http : //www. iro .umontreal . ca/labs/theorique/ index_en.html 

Laboratoire d'informatique theorique et quantique 
at Universite de Montreal 

In addition, you can find tutorials at the following URLs. 

http : / / chemphys . weizmann . ac . il/~schmuel/ comp/ comp.html 

Samuel L. Braunstein's Tutorial on Quantum Computation 

http : / / eve .physics . ox . ac .uk/QCresearch/ cryptoanalysis/qc .html 

Artur Ekert's "Introduction to Quantum Cryptoanalysis" 

http : //www. cwi . nl/~berthiau/publications/CTR.ps 

Andre Berthiaume's Tutorial on Quantum Computation |Kfl 



10 Do you Need a Daily Fix? 

If you cannot live without knowing what is new every day, send electronic mail 
to quant -phOxxx . lanl . gov with subject "subscribe" and let it guide you! 



(i 
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